$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa File: 1f32da3b-35e2-37b1-b145-ebe50a806536.roa (raw, json) Hash identifier: 4NwhqwrJ4hQyXGh2CgNgL7Z1mCinU0hhLOe9UU0fIgY= Subject key identifier: A8:A9:EB:98:D0:96:20:56:A9:CA:C2:6E:9D:6B:AF:24:6D:2A:97:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C1DF6F5E1E69C55A4AADA2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 20940 IP address blocks: 2600:1408:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:6f:5e:1e:69:c5:5a:4a:ad:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=f885a9e4-628a-4070-bcdc-a2f95d74217d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:68:89:ca:99:09:f2:39:49:63:f7:34:55: 9e:fc:39:58:2d:9f:81:4a:48:8d:dd:5f:14:d3:85: a5:4f:ff:62:f0:12:5a:38:a2:1a:c4:9f:3a:c3:ef: 3d:fd:82:16:9d:1a:de:8c:50:57:e2:7a:4d:8e:74: 1b:82:96:dd:d8:c1:72:71:18:09:2c:3b:cb:4e:db: 8e:52:18:34:36:5b:d6:0d:bd:2e:f1:3b:6e:47:66: fd:1d:27:de:2e:bd:54:de:29:c1:33:15:88:44:89: 04:e2:01:93:c5:47:e5:40:63:79:b4:a5:a4:2c:f4: 71:8a:61:61:44:af:67:7d:d6:a6:a3:3c:9b:e7:da: 78:5c:2e:2b:4f:41:df:a8:c3:05:2b:c4:38:06:ed: ad:a1:cd:d0:07:9e:38:f4:c8:61:49:22:bc:77:50: 18:66:7f:74:cc:a2:8a:55:55:3f:68:3e:d6:7b:6d: eb:cd:05:d6:48:4d:28:d2:74:54:5f:5f:1a:b0:62: a8:13:43:69:9c:a2:1a:cc:b9:10:30:7e:3d:a5:d9: 15:19:7a:c2:95:72:6c:e5:f4:aa:34:e7:5d:73:7b: 18:72:b8:44:47:8d:86:bd:f0:31:48:26:b1:30:2c: 34:8a:6d:26:80:9c:c8:6a:32:71:c8:51:88:16:fd: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:EB:98:D0:96:20:56:A9:CA:C2:6E:9D:6B:AF:24:6D:2A:97:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3b:a2:c3:e2:78:82:39:a1:3f:0e:bb:b0:da:b0:a5:b0:b0: 0a:9e:c2:d1:00:98:42:c5:ef:9a:ea:8e:30:71:0c:ba:f2:08: 46:15:b6:43:63:f9:22:e8:34:65:00:8f:b0:7c:7d:ba:47:91: 8a:57:8f:50:d5:a6:4f:a4:00:8b:72:ac:69:0b:cd:49:1a:0d: 46:2d:79:01:77:4b:21:6c:8b:87:b2:40:65:20:42:7f:e2:b0: c9:13:7f:36:41:2e:59:78:53:df:fe:69:8f:e7:a5:0a:25:cf: ca:21:db:d2:e8:37:e6:79:df:f5:ce:43:03:66:4f:de:f4:7d: 43:9c:de:6a:65:21:0c:77:e9:07:42:89:f4:7c:04:3e:cf:fe: 6b:1c:33:4a:d9:e4:bd:7f:db:44:7d:5b:92:3c:72:7f:2b:c6: bc:03:78:6a:8b:80:96:c9:f6:99:30:11:8e:53:b5:75:ea:63: b5:ae:16:6f:63:be:0d:07:da:33:92:f2:99:d1:cd:0f:12:65: 10:20:2b:cc:be:eb:ac:44:3d:8f:01:f0:77:2e:9b:1e:ce:9b: 50:2e:c5:4e:40:57:c0:02:c0:97:3a:70:08:99:37:71:f2:ce: f8:94:78:cf:de:d7:1f:d4:88:53:36:d5:6d:cd:e0:8f:17:7b: df:6c:47:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB329eHmnFWkqtosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk Zjg4NWE5ZTQtNjI4YS00MDcwLWJjZGMtYTJmOTVkNzQyMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy5oicqZCfI5SWP3NFWe/DlYLZ+BSkiN3V8U 04WlT/9i8BJaOKIaxJ86w+89/YIWnRrejFBX4npNjnQbgpbd2MFycRgJLDvLTtuO Uhg0NlvWDb0u8TtuR2b9HSfeLr1U3inBMxWIRIkE4gGTxUflQGN5tKWkLPRximFh RK9nfdamozyb59p4XC4rT0HfqMMFK8Q4Bu2toc3QB5449MhhSSK8d1AYZn90zKKK VVU/aD7We23rzQXWSE0o0nRUX18asGKoE0NpnKIazLkQMH49pdkVGXrClXJs5fSq NOddc3sYcrhER42GvfAxSCaxMCw0im0mgJzIajJxyFGIFv3KvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKip65jQliBWqcrCbp1rryRtKpefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYzMmRhM2ItMzVlMi0z N2IxLWIxNDUtZWJlNTBhODA2NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGU7osPieII5oT8Ou7DasKWwsAqewtEAmELF75rqjjBxDLryCEYV tkNj+SLoNGUAj7B8fbpHkYpXj1DVpk+kAItyrGkLzUkaDUYteQF3SyFsi4eyQGUg Qn/isMkTfzZBLll4U9/+aY/npQolz8oh29LoN+Z53/XOQwNmT970fUOc3mplIQx3 6QdCifR8BD7P/mscM0rZ5L1/20R9W5I8cn8rxrwDeGqLgJbJ9pkwEY5TtXXqY7Wu Fm9jvg0H2jOS8pnRzQ8SZRAgK8y+66xEPY8B8Hcumx7Om1AuxU5AV8ACwJc6cAiZ N3HyzviUeM/e1x/UiFM21W3N4I8Xe99sR4Q= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:25 2024 by rpki-client on console-fra.rpki-client.org